Analysis
- max time kernel
87s - max time network
204s - platform
windows11-21h2_x64 - resource
win11-20240412-en - resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system - submitted
23/04/2024, 17:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ControlCenter_Ver_22.12.20.01.exe
Resource
win10v2004-20240412-en
28 signatures
300 seconds
Behavioral task
behavioral2
Sample
ControlCenter_Ver_22.12.20.01.exe
Resource
win11-20240412-en
2 signatures
300 seconds
General
- Target ControlCenter_Ver_22.12.20.01.exe
- Size 227.2MB
- Sample240423-vyj5lsac35
- SHA256 a045faf771725a9fdae197d4f6506d2601b84ad3a4f83b9737a2f396b58e53d8
- MD5 729d46e3bf9f39e85a308992501b49d6
- SHA1 871575724ab6dca8495328bf22981316348fd984
- SHA512 ee0b2f75261df7ea116932307fd2e0ad11190ccb4984ee0961e611cf44418ce42b9bbaa231b898984427ab3e481972acb961d40ffc245840979207a47ce0c0e0
- SSDEEP 6291456:OueEq1z14NxgRaTQlyXGQMniLVAXuhZvsB0kplGJcDgGC/3EWiS:teEqZagRR4en4dvG0kp8ODgGCfEW
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 1456 ControlCenter_Ver_22.12.20.01.exe 1456 ControlCenter_Ver_22.12.20.01.exe 1456 ControlCenter_Ver_22.12.20.01.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsj8FBE.tmp\InstallOptions.dll
- Size 15KB
- SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
- MD5 ece25721125d55aa26cdfe019c871476
- SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
- SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
- SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsj8FBE.tmp\System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsj8FBE.tmp\ioSpecial.ini
- Size 1KB
- SHA256 35dae509020b9562fe02a98c392ad9a049a0fa280180c027b80d99715c3f6acc
- MD5 3e1a99866f98220679eca70da2e15257
- SHA1 6b41b07ac862e029132421f76568ce54e745d542
- SHA512 08d1738d0bff7b6f809c459148e6cdc1bbeeef3baa2ef59f31e0b009e1fee3512f562f7bae5c7abc37c4ac3d1c35c38278c7a46848e2e0d9deb3e7b8188f6bc1
- MD5 SHA1 SHA512